Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0065326c-b6fc-3f37-b1e0-e43a7697395f.roa
File:                     0065326c-b6fc-3f37-b1e0-e43a7697395f.roa (raw, json)
Hash identifier:          zxNtM+HWhq0NQ7jD2EYqDf4rLJ/ArISTmq3iev0TXFc=
Subject key identifier:   26:53:4D:27:AB:7E:82:81:05:18:9E:F5:5F:35:A9:61:42:BA:77:BA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DDDAD078A3EBEB26F46C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0065326c-b6fc-3f37-b1e0-e43a7697395f.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        71.86.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:dd:ad:07:8a:3e:be:b2:6f:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=380449e4-ebca-448c-8c0a-28d33dbc493f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:00:b6:83:c5:b6:4a:07:3a:bb:da:77:1b:57:
                    91:00:ec:bf:32:1a:25:bb:6c:83:99:c5:30:f7:ae:
                    3d:ac:19:f3:d4:b6:51:01:36:67:d2:45:93:ba:95:
                    e3:33:09:58:cf:41:c8:0f:cb:a6:b9:19:6a:fd:1c:
                    d5:e9:e4:c8:5e:3f:03:03:01:a2:7f:b1:cc:ce:d7:
                    12:91:75:ac:84:36:a3:0e:2a:ac:e9:b5:2b:7b:65:
                    7b:4e:e8:e0:ac:eb:b0:f0:ea:6a:7b:e0:99:8e:64:
                    a9:87:57:39:bc:0a:12:dd:2e:eb:ef:76:df:64:c9:
                    1a:ea:ea:98:69:82:e4:20:b8:ac:7f:21:cf:5f:96:
                    09:a0:62:64:3c:2c:bc:13:fe:8c:18:ef:c4:4f:50:
                    65:1c:49:4e:8a:f5:4e:82:b8:38:9c:9d:59:4a:51:
                    ef:2a:0d:71:0c:c8:af:40:58:cf:7d:f0:1a:48:1b:
                    fc:b2:43:05:4c:e1:79:4c:e7:dc:0f:01:d0:f8:ee:
                    62:e2:10:72:7d:05:bb:9e:c5:1c:13:c3:ff:16:0c:
                    91:05:29:f8:74:03:8c:a9:53:7b:93:f9:27:1c:b3:
                    f3:23:a0:9c:8e:5c:c4:b1:19:9a:07:e3:8c:2a:34:
                    a6:8f:57:54:0b:a2:0b:f8:71:09:39:45:7a:74:2e:
                    c0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:53:4D:27:AB:7E:82:81:05:18:9E:F5:5F:35:A9:61:42:BA:77:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0065326c-b6fc-3f37-b1e0-e43a7697395f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.86.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:81:59:80:bd:09:ef:eb:3e:cd:de:63:3b:9c:ba:4e:7c:45:
         9a:41:9d:49:cf:e6:ce:4f:0c:2d:a7:5d:94:fd:37:fa:a0:d6:
         3b:c4:b4:d8:ee:6e:25:9f:17:49:5e:88:56:7b:19:5e:87:68:
         1a:c5:f1:eb:43:5c:8c:a9:58:f0:70:8d:18:20:ae:86:41:b7:
         66:92:68:60:3b:08:6f:dd:3c:b6:65:49:69:88:85:5d:e8:b6:
         4d:7d:8e:63:a3:a8:42:ca:66:28:0e:7f:7b:63:a0:77:e4:e0:
         7f:c2:72:cf:eb:8b:2f:cd:a6:f9:6a:cd:31:93:e4:c8:0f:03:
         49:1d:45:31:2f:45:fc:f0:80:dd:71:7f:df:92:e8:fb:85:4e:
         73:f2:20:71:be:cb:a0:8e:27:da:3f:13:fa:04:56:55:fb:64:
         2d:17:f2:10:32:d4:b5:88:e6:b2:47:45:aa:2e:34:35:4b:ac:
         b1:ff:87:43:cd:9a:da:f6:24:39:78:99:27:2d:42:a5:3b:25:
         20:bc:4c:25:5c:b7:35:8a:d4:1c:11:76:b0:3a:f7:36:da:2f:
         bc:9c:71:04:66:d5:0a:85:8b:9f:02:64:b3:ff:6c:f5:b1:f3:
         35:d2:17:ac:24:ca:d8:59:2d:49:cf:8a:0d:6a:16:3c:59:f2:
         b1:41:ba:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 03:35:09 2026 by rpki-client